Hands-On Cybersecurity Studies: Automated Scan Tool Detection
Jaime C. Acosta · 2023
This special report describes a hands-on cybersecurity exercise that focuses on novel research aimed at automatically collecting data and generating intrusion detection system (IDS) rules using the Generate, Examine, Match (GEM) system. In the exercise, participants create a network scenario and learn how to collect and analyze the traffic generated by a network scanning tool. Afterward, they create an IDS rule by hand. The subsequent steps lead students through how to use the GEM tool and then they automatically create IDS rules.